19
Jul
06

Changing sysman and dbsnmp passwords – It ain’t that easy

And of course it’s not that easy!

Actually this is quite annoying.

I have 2 concerns: Having my backups working properly as well as the DB Console.

But also renew my passwords from time to time.

And here we are sys and system’s passwords are luckily easy to change.

But what about sysman and dbsnmp?

Those are not. Try to change it and you will have your backups stop working, OEM throws in tons of errors and soon you will be asking yourself why the hell you wanted to change those passwords in the first place.

The reason

Sysman user is the schema of the standalone repository of the 10g EM DB Control.

If you have change only dbsnmp password your backups will work and the DB console as well but all the cool graphics that I like to show to our customers will disappear and that’s not cool.
There are 2 procedures. 1 for each passwords

Changing sysman password

So, since it’s the schema of the standalone repository, the DB console must be shut down.

C:\emctl stop dbconsole

This should stop dbconsole and the agent.

Have a check first.

C:\emctl status dbconsole

C:\emctl status agent

On windows the agent is very often not shutdown properly… So do it using the services screen find your Oracle10Agent service and make sure it’s not started.

When this is done, open an sqlplus console and throw in the command to change password

C:\set oracle_sid= [your SID]

C:\sqlplus / as sysdba

SQL>alter user sysman identified by [New Password];

Then check the new password by connecting with sysman user. This is to make sure sysman is not locked. Because when the password is changed and you try to reach the OEM, it will locked the sysman user.

SQL>conn sysman/newpassword

connected.

Ah that’s cool

if you get

ora-28000: account is locked

Then unlock it first.

SQL> alter user sysman account unlock;

Now that you get your new password and you are sure the account is not locked, you have to modify the emoms.properties file.

It’s located at ORACLE_HOME\[HOST]_[SID]\sysman\config. Replace HOST with your computer name and SID with your SID.

There are 2 parameters to modify:

oracle.sysman.eml.mntr.emdRepPwd= [Your encrypted password]

oracle.sysman.eml.mntr.emdRepPwdEncrypted=True

Change [Your encrypted password] with your new password in the first parameter

and change True to False in the second parameter.

Wait a minute. That is not very safe! The password is not encrypted!

That’s where Oracle 10g is cool. It’s not like you have a choice here.

As soon as you restart Dbconsole and Oracle agent, it will change false to true and your password will look like a bunch of numbers and letters again (Geeks love that) 🙂

So just type in:

C:\emctl start dbconsole

C:\emctl start agent

Again, if the agent is not started, try to do it through the service window. I found it to work much better than the command line for Oracle Agent.

Changing dbsnmp password

It’s about the same thing except it’s another configuration file.

Stop Db Console and Oracle agent. Just like before.

Make sure it’s stopped just like before.

Modify your user password just like before except use alter dbsnmp instead of sysman.

Finally make sure it’s not locked.

We have to modify the file targets.xml this time and that one is located at:

ORACLE_HOME\[HOST]_[SID]\sysman\emd

Look for this line:

<Property NAME=”password” VALUE=”<[Your encrypted password]>” ENCRYPTED=”TRUE”/>

Just like before, change [Your encrypted password] to your new password and change TRUE to FALSE.

Just like before, restart your DB Console service and Oracle Agent service.

Make sure they are working.

C:\emctl status dbconsole

C:\emctl status agent

Voila! It’s all done.

The bottom line is: When you want to change a password that doesn’t look like a collegue name, find some documentation on it first. A good way is to google: Problem [user].

You’ll find a lot of them!

Advertisements

30 Responses to “Changing sysman and dbsnmp passwords – It ain’t that easy”


  1. 1 Alex
    September 24, 2007 at 1:12 am

    Thanks for the DBSNMP and SYSMAN password-changing notes, I found them to be really clear. cheers!

  2. September 24, 2007 at 7:04 am

    Thanks Alex.
    Im glad my experience help others a little 🙂
    I’ve been through a lot recently but I got to figure out the ins and outs first.
    It’s about sync and dataguard 🙂

  3. 3 Aashish
    October 17, 2007 at 6:49 am

    I had the same problem i am not able to connect as sys as sysdba using oracle 10G DB control.But i am able to connect using Enterprise Manager.

    I have done log on as a batch job though i think thats not required …and password of sysman is correct

    the error displayed is invalid username and password though i can connect using …the same password using enterprise manager ..please help

  4. October 17, 2007 at 2:32 pm

    Hi.

    Here what I would do:

    connect like this on console:

    C:\>set oracle_sid=
    C:\>sqlplus / as sysdba
    SQL>connect sysman/yourpassword

    if it fails:
    SQL>alter user sysman identified by ;
    At least now I’m sure what the password should be.

    Try to connect again using the same user.

    if it fails again, you might want to try:
    SQL>alter user sysman account unlock;

    Then I would follow the document right here to configure sysman password for EM.

    hope this helps

    nico

  5. 6 Hank
    July 16, 2008 at 3:27 pm

    how to change the password which is used to talk to OMS from agent managed server?
    I forgot the password I set when install OMS.

    Thanks,

    – Hank

  6. 7 Kathie
    November 3, 2008 at 10:33 pm

    Well done! Wanted you to know you were right about using the Window’s service. Tried your instructions first without and it didn’t work. You save me a ton of time by having such well written instructions.

    Thanks!!
    Kathie

  7. 8 Phani
    November 25, 2008 at 2:23 am

    Thanks very much for that crystal clear steps to change the passwords. It is very much helpful.

    Phani

  8. 9 DannyH
    March 19, 2009 at 7:52 pm

    Thank you so much. Finally go the 10g EM working after this update.

  9. 10 Brian
    April 1, 2009 at 4:53 pm

    If I don’t have a catalog (repository) database created (Just using the control file), I don’t have to go through this process. I can just change the DBSNMP password. Is that correct?

    Thanks

    -Brian-

  10. 11 Nikki
    June 30, 2009 at 8:17 am

    Nice Job Mate !!! It was very helpful !!!

  11. July 14, 2009 at 4:46 am

    Oh my god! A year later there’s still lots of people with the same problem.
    I’m happy the few post I got online on this blog are still helping people out 🙂

  12. 13 Aravamuthan
    January 5, 2010 at 4:31 am

    Thanks a lot , It helped me in time.

  13. 14 Frederick Tang
    January 18, 2010 at 2:28 am

    Thanks for the steps, it helped!

  14. February 10, 2010 at 9:50 pm

    Thanks a lot! very useful and clear information!

  15. July 9, 2010 at 8:03 am

    Thanks alot, its very helpfull 🙂

  16. 17 Kim Dang
    July 15, 2010 at 9:34 pm

    Thank you very much! It is very helpful!

  17. 18 Sam
    October 28, 2010 at 7:20 pm

    I tried to change my password for sysman. I could make the changes to the property file. But when I try to start the dbconsole on the dos window , the message i get is OC4J configuration issue. Then I started the OC4J instance and tried to restart the dbconsole. This time I get a message “EM configuration issue. C:\app\sambhaji\product\11.1.0.\db_1/DG9TCS91_orcl; not found”.

    Can you please help.

  18. 19 Arati
    October 29, 2012 at 8:42 am

    Thank you !!!Now its working fine.

  19. 20 Rob
    March 13, 2013 at 6:27 pm

    Thanks! I wish Oracle documentation could make it that straightforward!

  20. May 12, 2013 at 8:13 am

    Hey there are using WordPress for your blog
    platform? I’m new to the blog world but I’m trying to get
    started and create my own. Do you require any coding expertise to make your own blog?
    Any help would be really appreciated!

  21. 22 Marcus
    June 24, 2013 at 10:02 pm

    THanks man !

  22. August 4, 2013 at 2:35 am

    Excellent internet site. A good amount of practical information listed here. I am transmitting that to a number of pals ans likewise sharing with yummy. And clearly, thanks for your effort!

  23. 24 Erta
    May 15, 2014 at 9:28 am

    I tried to carefully apply your instructions but I get no successful results (Oracle 11g). I am able to reset passwords for both dbsnmp and sysman and stop and successfully restart dbconsole and agent services but enterprise manager can not start successfully displaying a message “The database is down. Please specify the host credentials to access database restart and diagnostics tools.” and displays just username and passwords fields but won’t accept my login attempts even though my credentials are correct.
    Another thing is that in your step of updating sysman/config/ emoms.properties after then restarting the services dbconsole and agent that plain text pwd seems not to be encrypted and later in target.xml file there are no input.
    I am new to oracle but my guessing is that maybe some component of oracle was not correctly installed on our server!! Actually another employee dealt with installtion and first time configuration of oracle.

    Any help appreciated!

  24. August 26, 2014 at 11:00 pm

    You are so interesting! I don’t suppose I have read something like this before.
    So nice to find somebody with some genuine thoughts on this issue.
    Seriously.. thanks for starting this up. This site is
    something that is required on the web, someone with a little
    originality!

  25. April 23, 2015 at 1:57 pm

    Great post, very helpful. Thank you

  26. April 9, 2017 at 10:21 am

    Whoah this blog is excellent i like studying your articles.
    Keep up the great work! You understand, a lot of individuals are searching around for this information, you
    could help them greatly.


Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s


%d bloggers like this: